mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
rithu leena john	11d4d78d6b	Merge pull request #850 from ericchiang/cherry-pick-where-statement storage/sql: add missing WHERE statement to refresh token update (cherry pick)	9 years ago
Eric Chiang	5586a3c1fd	storage/sql: add missing WHERE statement to refresh token update	9 years ago
rithu leena john	29af9b4c75	Merge pull request #830 from ericchiang/cherry-pick-expiry-fix server: fix expiry detection for verification keys	9 years ago
Eric Chiang	5c6ddbb6dc	server: fix expiry detection for verification keys	9 years ago
rithu leena john	1bb4edb25c	Merge pull request #824 from rithujohn191/cherry-pick-change storage/kubernetes: fix conflict error detection in TRP creation	9 years ago
Eric Chiang	0d894e3186	storage/kubernetes: fix conflict error detection in TRP creation PR #815 fixed the Kubernetes storage implementation by correctly returning storage.ErrAlreadyExists on POST conflicts. This caused a regression in TPR creation (#822) when some, but not all, of the resources already existed. E.g. for users upgrading from old versions of dex. Fixes #822	9 years ago
Eric Chiang	565805b716	Merge pull request #821 from rithujohn191/cherry-pick storage/kubernetes: fix hash initialization bug	9 years ago
Eric Chiang	2cfcdfb80f	storage/kubernetes: fix hash initialization bug	9 years ago
Eric Chiang	f8aec4c1c5	Merge pull request #816 from ericchiang/cherry-pick-k8s-storage-fix storage/kubernetes: fix kubernetes storage conformance test failures	9 years ago
Eric Chiang	7968f283f2	storage/kubernetes: fix kubernetes storage conformance test failures	9 years ago
Eric Chiang	af0d9cebd1	Merge pull request #810 from caarlos0/patch-1 simplified clone: using go get	9 years ago
Carlos Alexandro Becker	f57e19e6ab	simplified clone: using go get	9 years ago
rithu leena john	c76832eaea	Merge pull request #809 from rithujohn191/set-error-flag storage: Surface "already exists" errors.	9 years ago
rithu john	3df1db1864	storage: Surface "already exists" errors.	9 years ago
rithu leena john	90c80e700a	Merge pull request #807 from rithujohn191/fix-typo web/static/main.css: fix typo.	9 years ago
rithu john	0ee40865a2	web/static/main.css: fix typo.	9 years ago
rithu leena john	7e9dc836eb	Merge pull request #802 from rithujohn191/token-revocation api: adding a gRPC call for revoking refresh tokens.	9 years ago
rithu john	1ec19d4fbf	api: adding a gRPC call for revoking refresh tokens.	9 years ago
rithu leena john	b119ffddcb	Merge pull request #801 from rithujohn191/token-revocation api: adding a gRPC call for listing refresh tokens.	9 years ago
rithu john	d201e49248	api: adding a gRPC call for listing refresh tokens.	9 years ago
rithu leena john	53e383670a	Merge pull request #793 from rithujohn191/token-revocation storage: Add OfflineSession object to backend storage.	9 years ago
rithu john	d928ac0677	storage: Add OfflineSession object to backend storage.	9 years ago
rithu leena john	49f446c1a7	Merge pull request #800 from ericchiang/server-test-comments server: clean up test comments and code flow	9 years ago
Eric Chiang	80038847de	server: clean up test comments and code flow	9 years ago
Eric Chiang	dd415f5e2f	Merge pull request #799 from ericchiang/thirdpartyresources Documentation: warn admins not to edit dex ThirdPartyResources manually	9 years ago
rithu leena john	167d7be281	Merge pull request #790 from givia/github-teams-pagination Fixes #706	9 years ago
Eric Chiang	adf3703962	Documentation: warn admins not to edit dex ThirdPartyResources manually	9 years ago
Eric Chiang	7f860e09b5	Merge pull request #796 from ericchiang/html-template {web,server}: use html/template and reduce use of auth request ID	9 years ago
Eric Chiang	72a431dd4b	{web,server}: use html/template and reduce use of auth request ID Switch from using "text/template" to "html/template", which provides basic XSS preventions. We haven't identified any particular place where unsanitized user data is rendered to the frontend. This is just a preventative step. At the same time, make more templates take pure URL instead of forming an URL themselves using an "authReqID" argument. This will help us stop using the auth req ID in certain places, preventing garbage collection from killing login flows that wait too long at the login screen. Also increase the login session window (time between initial redirect and the user logging in) from 30 minutes to 24 hours, and display a more helpful error message when the session expires. How to test: 1. Spin up dex and example with examples/config-dev.yaml. 2. Login through both the password prompt and the direct redirect. 3. Edit examples/config-dev.yaml removing the "connectors" section. 4. Ensure you can still login with a password. (email/password is "admin@example.com" and "password")	9 years ago
rithu leena john	12f969364e	Merge pull request #794 from rithujohn191/saml-doc Documentation: Minor changes to SAML connector doc.	9 years ago
rithu john	fecd596ae2	Documentation: Minor changes to SAML connector doc.	9 years ago
rithu leena john	42d0728048	Merge pull request #785 from holgerkoser/master Improve SAML Signature and Response Validation	9 years ago
rithu leena john	27224cdc98	Merge pull request #788 from givia/gitlab-connector connector: add GitLab connecor	9 years ago
Ali Javadi	e623ad4d35	connector: add GitLab connector	9 years ago
Eric Chiang	0dcf1bcf79	Merge pull request #792 from ericchiang/auth-endpoint-post server: support POSTing to authorization endpoint	9 years ago
Eric Chiang	8541184afb	server: support POSTing to authorization endpoint Fixes #791	9 years ago
rithu leena john	36883d0bbf	Merge pull request #789 from rithujohn191/token-revocation-proposal Documentation/proposals: Add a proposal for refresh token revocation.	9 years ago
rithu john	d114b8ffc7	Documentation/proposals: Add a proposal for refresh token revocation.	9 years ago
Ali Javadi	98bfa4fbb1	Fixes #706	9 years ago
Holger Koser	27a1e9f1bd	vendor: revendor	9 years ago
Holger Koser	e46f2ebe40	Improve SAML Signature and Response Validation * Improve Order of Namespace Declarations and Attributes in Canonical XML. This is related to an issue in goxmldsig for which I created an [pull request](https://github.com/russellhaering/goxmldsig/pull/17). * Do not compress the AuthnRequest if `HTTP-POST` binding is used. * SAML Response is valid if the Message and/or the Assertion is signed. * Add `AssertionConsumerServiceURL` to `AuthnRequest` * Validate Status on the Response * Validate Conditions on the Assertion * Validation SubjectConfirmation on the Subject	9 years ago
rithu leena john	48fcf66a35	Merge pull request #783 from rithujohn191/config-validation cmd/dex: make connector name field mandatory in dex configuration.	9 years ago
rithu john	31e8009441	cmd/dex: make connector name field mandatory in dex configuration.	9 years ago
Eric Chiang	613d160ad9	Merge pull request #782 from marians/patch-1 Docs: Added a name to the LDAP connector	9 years ago
Eric Chiang	d3f4ae2ab7	Merge pull request #781 from ajohnstone/patch-1 Update kubernetes.md - correct typo	9 years ago
Marian Steinbach	38a2e41e0a	Added a name to the connector Without a name, the example app's login form will only show `Log in with` as a button label.	9 years ago
Andrew Johnstone	b10c0a1c87	Update kubernetes.md	9 years ago
rithu leena john	a3ef8d26bc	Merge pull request #777 from rithujohn191/update-release-doc Documentation: add docs on patch release process.	9 years ago
rithu john	265cfacd17	Documentation: add docs on patch release process.	9 years ago
rithu leena john	fe93f60af4	Merge pull request #775 from xeonx/master Allow CORS on keys and token endpoints	9 years ago

1 2 3 4 5 ...

412 Commits (v2.2.x) All Branches Search

412 Commits (v2.2.x)

All Branches